CVE-2024-47210
Gladys Assistant before 4.45.1 allows Privilege Escalation (a user changing their own role) because req.body.role can be used in updateMySelf in serve...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Gladys Assistant before 4.45.1 allows Privilege Escalation (a user changing their own role) because req.body.role can be used in updateMySelf in server/api/controllers/user.controller.js.
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- web github.com